Devices
This page lists the devices registered in the tenant's directory, covering everything Entra ID knows about regardless of whether it is managed by Intune. It is the place to check a device's join type and sign-in state, block a device that should no longer authenticate, or retrieve its recovery key.
Table Details
The properties returned are for the Graph resource type device. For more information on the properties please see the Graph documentation.
Table Actions
View in Entra
Opens the device in the Microsoft Entra admin center in a new tab.
Enable Device
Allows the device to authenticate with tenant credentials again. Greyed out for a device that is already enabled.
Disable Device
Blocks the device from authenticating with tenant credentials, without removing it from the directory. Greyed out for a device that is already disabled.
Retrieve BitLocker Keys
Returns the device's BitLocker recovery key from Entra ID, displayed in the result.
Delete Device
Removes the device from Entra ID. Any recovery keys held against it are lost with it, so retrieve them first if they may still be needed.
Retrieving a BitLocker key returns a live recovery key in plain text, so treat the result as sensitive and avoid leaving it in a ticket or a chat message. Each retrieval is written to the CIPP audit log, recording who asked for it and when.
Disabling a device stops it authenticating but leaves the object in place, so the action can be reversed and the device's recovery keys stay available. Deleting is the destructive option, and a device that is still in use will simply register itself again the next time it is joined.
Feature Requests/Ideas
We value your feedback and ideas. Please raise any feature requests on GitHub.
Last updated
Was this helpful?